Note that this analysis seems to be based on the complete SMB3 disassembly, as RGME uses the same variable names. In my view, it was much more impressive to come up with the disassembly in the first place.

https://github.com/captainsouthbird/smb3